Privacy Policy

We collect the following categories of information when you use the Service:

• Account information. Email address, password (in hashed form via our authentication provider), full name, and phone number.
• Profile content. Avatar photos and other profile details you choose to upload.
• Order information. Items selected, scheduling preferences, delivery addresses, order notes, and order status.
• Payment-related information. Because payment is processed out-of-band by third-party providers, we do not collect or store payment card details. We may receive limited confirmation data, such as a transaction reference, from the payment provider or from your manual confirmation.
• Device and usage information. IP address, browser type and version, operating system, language preferences, pages viewed, and approximate time spent on each page.
• Cookies and similar technologies. Session cookies for authentication, and limited first-party storage to maintain your shopping cart between sessions.
• Communications. Messages you send to us, including via email or in-app forms, and our responses.

We use the information we collect to:

• Provide, maintain, and improve the Service, including processing and coordinating your orders;
• Authenticate you, prevent unauthorized access, and protect the security of the Service;
• Communicate with you about your orders, send confirmations, and respond to your inquiries;
• Send you payment links and order status updates;
• Comply with our legal obligations, including tax reporting and responding to valid legal process;
• Detect, investigate, and prevent fraudulent, abusive, or illegal activity;
• Analyze usage patterns to understand how the Service is used and to improve features and performance.

We process your information based on (i) the performance of our contract with you to provide the Service, (ii) our legitimate interests in operating, securing, and improving the Service, (iii) your consent where required by applicable law, and (iv) compliance with our legal obligations.

We do not sell or rent your personal information. We share information only as described below:

• Restaurant partners. We share order details (including items, quantities, scheduled time, and delivery address) with the restaurants fulfilling your order so they can prepare and hand off the food.
• Service providers. We use third-party providers for hosting, database services, file storage, authentication, email delivery, payment-link generation, and analytics. These providers process information on our behalf and are bound by confidentiality and security obligations.
• Delivery personnel. The administrator may share your name, phone number, and address with delivery personnel (whether internal staff or third-party couriers) to enable delivery.
• Legal compliance. We may disclose information if required by law, subpoena, court order, or valid governmental request, or where we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer that materially affects your rights.

We use a small number of strictly necessary cookies to keep you signed in and to maintain your shopping cart. We may use limited analytics cookies to understand aggregate usage patterns. We do not use cross-site advertising trackers. You may disable cookies through your browser settings, but doing so may limit your ability to use parts of the Service that depend on authentication.

We do not currently respond to "Do Not Track" browser signals because no consistent industry standard has been adopted.

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These include encryption in transit, role-based access controls, and routine review of access permissions. No method of transmission over the internet or method of electronic storage is 100% secure, however, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials. If you believe your account has been compromised, contact us immediately.

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information for longer where required by law (for example, for tax records), where necessary to resolve disputes, enforce our agreements, or where retention is otherwise legitimately justified.

Subject to applicable law, you may have the following rights with respect to your personal information:

• Access and portability. Request a copy of the personal information we hold about you;
• Correction. Request correction of inaccurate or incomplete information;
• Deletion. Request deletion of your personal information, subject to legal retention obligations;
• Objection or restriction. Object to or request restriction of certain processing;
• Withdrawal of consent. Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@samyin.com. We will respond within the time frames required by applicable law.

California residents may have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete that information, and the right not to be discriminated against for exercising these rights. We do not sell personal information.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so that we can delete it.

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to such transfer.

The Service may contain links to third-party websites or services, including payment-link providers. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing information to them.

We may update this Privacy Policy from time to time. The updated version will be indicated by a new "Last updated" date. Material changes will be communicated by email or a prominent notice on the Service prior to the change becoming effective. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@samyin.com.

Samyin Inc.
Boston, Massachusetts, United States